| Summary | An improper authorization flaw exists in the Ansible Automation Controller. This flaw allows an attacker using the k8S API server to send an HTTP request with a service account token mounted via `automountServiceAccountToken: true`, resulting in privilege escalation to a service account. |
|---|---|
| Publication Date | Sept. 13, 2024, 2:15 a.m. |
| Registration Date | Sept. 13, 2024, 5 a.m. |
| Last Update | Sept. 13, 2024, 2:15 a.m. |